Setupv1[.]41[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Setupv1.41.exe
Size

286KB
MD5

52ddc00ac6b9dfdc1920e830c93acdcd
SHA1

15c3ebb995f8fbb9f2880a0329272e0fa046471e
SHA256

3add29c2266daa534d278b2aebb8851a7f1ab9d9df248e54b9ff140256246ff4
SHA512

d6d4e89cb5d9570ce1257b61782c15d19001b9fe0ff0faec7e4bc4058ce3a2ba85c4311d8d3078f9a36b2ec333696aa85d796da618b10ee2ebf85c84c44fb7d9
SSDEEP

6144:LgJJdYhSYz9P6t6iG0sZrfVQuYWKpcDAsXrCyy:kJTE34G0sV6uYyD7D

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Setupv1.41.exe

Files

Setupv1.41.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\905ewqul0nvsv4\obj\Release\doX.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 283KB - Virtual size: 282KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ